Last updated: January 10, 2023

By accessing or using “IheartStudy” Web/Mobile Application (the “App”) and/or using Services

as set out hereinafter, you consent to the information collection, disclosure and use practices

described in this Privacy Policy. The App is owned and maintained by Iheart for education

technology LLC having principal office located at Fifth Settlement , New Cairo,

Egypt (hereinafter referred to as “Company”, “we,” “us” or “our”). This Privacy Policy also

applies to all Services provided by us and sets out how we may collect, use and disclose

information in relation to our clients as well as users of the App.

Use of our App and Services, including all materials presented herein, may be subject to

separate Terms of Use and the following Privacy Policy.

1. Information We Collect

o Your privacy is important to us and we have taken steps to ensure that we do

not collect more information from you than is necessary for us to provide you

with our Services and to protect your account.

o We may process the following categories of personal data about you:

 Personal Data means any information relating to an identified or

identifiable natural person. This information may include, in particular by

reference to an identifier, such as name, e-mail address, country, Date of

Birth (optional) and all information, data and materials as we may deem

necessary for provision of Services.

 Communication Data may include any communication that you send to

us whether that be through the Contact Form on our website or App,

through email, text, social media messaging, social media posting or any

other communication that you send us. We process this data for the

purposes of communicating with you, for record keeping and for the

establishment, pursuance or defense of legal claims. Our lawful ground

for this processing is our legitimate interests which in this case are to

reply to communications sent to us, to keep records and to establish,

pursue or defend legal claims.

 Payment Data. We may collect data necessary to process your payment if

you make purchases, such as your payment instrument number (such as

a credit card number), and the security code associated with your

payment instrument. All payment data is stored by Google and Apple in

App Purchase. You may find their privacy policies

at https://safety.google/securityprivacy/ and https://www.apple.com/leg

al/privacy/en-ww/

 Technical Data: We automatically collect certain information when you

visit, use or navigate the App. This information does not reveal your

specific identity (like your name or contact information) but may include

device and usage information, such as device characteristics, operating

system, language preferences, referring URLs, device name, country,

information about how and when you use our App and other technical

information. This information is primarily needed to maintain the security

and operation of our App, and for our internal analytics and reporting

purposes.

The information we collect includes the following:

Log and Usage Data. Log and usage data is service-related, diagnostic, usage and performance

information our servers automatically collect when you access or use our App and which we

record in log files. Depending on how you interact with us, this log data may include your device

information, settings and information about your activity in the App (such as the date/time

stamps associated with your usage, pages and files viewed, searches and other actions you take

such as which features you use), device event information (such as system activity, error

reports (sometimes called ‘crash dumps’) and hardware settings).

Device Data. We collect device data such as information about your computer, phone, tablet or

other device you use to access the App. Depending on the device used, this device data may

include information such as your device and application identification numbers, browser type,

hardware model, operating system and system configuration information.

Push Notifications. We may request to send you push notifications regarding your account or

certain features of the App. If you wish to opt-out from receiving these types of

communications, you may turn them off in your device’s settings.

The Technical Information is primarily needed to maintain the security and operation of our

App, for troubleshooting and for our internal analytics and reporting purposes

 Marketing Data may include data about your preferences in receiving marketing from us

and your communication preferences. Our lawful ground for this processing is our

legitimate interests which in this case are to study how customers use our

products/services, to develop them, to grow our business and to decide our marketing

strategy.

 We may use Personal Data, Payment Data, Communication Data, Technical Data and

Marketing Data (the “Data”) to provide you with Services. We may also use such data to

send other marketing communications to you.

2. Name and Address of the Data Controller

o Data Controller for the purposes of the General Data Protection Regulation

(GDPR), other data protection laws applicable in Member states of the European

Union and other provisions related to data protection is:

Name: Iheart for education technology LLC

Email: help@iheartstudy.com

Address: 31 Retaj Compound, Fifth Settlement, New Cairo, Egypt

App: IheartStudy

Website: www.iheartstudy.com

3. Consent and its Withdrawal

o When you visit our App, you provide us consent to use your Data as per this

collect all relevant and necessary Data about you from you. In addition, by

signing up and filling the Forms available on the App, you give us your express

consent and permission to use your Data.

o We will process the Data only after taking written instructions/consent from you

mostly in electronic form in the form of Clickable button, a checkbox or through

an email.

o If you change your mind, you may withdraw your consent for us to contact you,

for the continued collection, use or disclosure of your information, at any time,

by contacting us at help@iheartstudy.com.

4. Promotional Emails

o You agree that the App and/or third parties may from time to time send e-mail

messages to you which offer products and services, promotions, subscriptions or

registration-based services or other material. If you wish to discontinue receiving

such email, you may opt-out by writing us through email

at help@iheartstudy.com. Your preferences will then be updated.

5. How We Use and Process the Data

o The Data collected by us from you may be used to provide you with Services and

better understand your needs related services and programs, to correspond with

you and reply to your questions with about our services.

o We will not rent or sell your Data to others. We may store the Data in locations

outside our direct control (for instance, on servers or databases co-located with

hosting providers).

o We process your Data for purposes based on legitimate business interests, the

fulfillment of our contract with you, compliance with our legal obligations,

and/or your consent.

o We use your Data collected via our App for a variety of business purposes in

reliance on our legitimate business interests, in order to enter into or perform a

contract with you, with your consent, and/or for compliance with our legal

obligations.

o If you provide any Data to us, you are deemed to have authorized us to collect,

retain and use that data for the following purposes:

6. verifying your identity;

7. providing you with customer service and responding to your queries, feedback, or

disputes;

 making such disclosures as may be required for any of the above purposes or as

required by law, regulations and guidelines or in respect of any investigations, claims or

potential claims brought on or against us;

1. providing and maintain the Services;

2. notifying you about changes to our Services;

3. managing our account and keeping it in working order;

 Sending you marketing and promotional communications: We and/or our third-party

marketing partners may use the personal information you send to us for our marketing

purposes, if this is in accordance with your marketing preferences;

 Delivering targeted advertising to you: We may use your information to develop and

display personalized content and advertising (and work with third parties who do so)

tailored to your interests and/or location and to measure its effectiveness.

1. Achieving other business purposes, such as data analysis, identifying usage trends,

determining the effectiveness of our promotional campaigns and to evaluate and

improve our App, products, marketing and your experience. We may use and store this

information in aggregated and anonymized form so that it is not associated with

individual end users and does not include personal information.

o We shall ensure that:

2. The Data collected and processed for and on our behalf by any party is collected and

processed fairly and lawfully;

3. You are always made fully aware of the reasons for the collection of Data and are given

details of the purpose(s) for which the data will be used;

 The Data is only collected to the extent that is necessary to fulfil the purpose(s) for

which it is required;

1. No Data is held for any longer than necessary in light of the purpose(s) for which it is

required.

2. Whenever cookies or similar technologies are used online by us, they shall be used

strictly in accordance with the law;

3. You are informed if any data submitted by you online cannot be fully deleted at your

request under normal circumstances and how to request that the we delete any other

copies of that data, where it is within your right to do so;

 Appropriate technical and organizational measures are taken to protect the Data;

 Data is transferred securely, whether it is transmitted electronically or in hard copy.

1. You can fully exercise your rights with ease and without hindrance.

2. Disclosure of Data

o We shall not be able to keep your Data private in response to legal process i.e., a

court order or a subpoena, a law enforcement agency’s request. If, in our view, it

is deemed appropriate to investigate, prevent, or take action regarding illegal

activities, suspected fraud, situations involving potential threats to the physical

safety of any person, violations of our terms of use, or as otherwise required by

law, we may be compelled to disclose the Data and Personal Data. Moreover, in

case of takeover, merger or acquisition, we reserve a right to transfer your data

to new platform.

o We may disclose the Data in the good faith belief that such action is necessary

to:

3. comply with a legal obligation

4. protect and defend our rights or property

 prevent or investigate possible wrongdoing

 protect the personal safety of users of the Service or the public

 protect against legal liability

o When necessary, we may also disclose and transfer your Data to our professional

advisers, law enforcement agencies, insurers, government and regulatory and

other organizations.

7. Data Storage

o Your Data may be stored and processed at the servers in the United States,

Europe, or any other country in which the App or its subsidiaries, affiliates or

service providers maintain facilities.

o The App may transfer Data to affiliated entities, or to other third parties across

borders and from your country or jurisdiction to other countries or jurisdictions

around the world. Your consent to this Privacy Policy followed by your

submission of such information represents your agreement to that transfer.

o We will take all steps reasonably necessary to ensure that your data is treated

securely and in accordance with this Privacy Policy and no transfer of your Data

will take place to an organization or a country unless there are adequate controls

in place including the security of your data and other personal information.

o We will only retain your Data preferably for as long as necessary to fulfil the

purposes we collected it for, including for the purposes of satisfying any legal,

see section regarding insurance requirement and reporting requirements. When

deciding what the correct time is to keep the Data for we look at its amount,

nature and sensitivity, potential risk of harm from unauthorised use or

disclosure, the processing purposes, if these can be achieved by other means

and legal requirements.

8. How We Protect Your Information

o We store all the Data submitted by you through App at a secure database

namely Firebase (Google) for Authentication and AWS (Amazon) for App Servers.

o We are concerned with protecting your privacy and data, but we cannot ensure

or warrant the security of any data you transmit to or guarantee that your Data

may not be accessed, disclosed, altered or destroyed by breach of any of our

industry standard physical, technical or managerial safeguards.

o No method of transmission over the Internet or method of electronic Therefore,

we cannot guarantee its absolute security. If you have any questions about

security of our App, you can contact us at help@iheartstudy.com.

o Any Data supplied by you will be retained by us and will be accessible by our

employees, any service providers engaged by us and third parties.

9. Compliance with the GDPR

o For users based in the European Union (EU), the App shall make all reasonable

efforts to ensure that it complies with The General Data Protection

Regulation(GDPR) (EU) 2016/679 as set forth by the European Union regarding

the collection, use, and retention of Data from European Union member

countries. App shall make all reasonable efforts to adhere to the requirements of

notice, choice, onward transfer, security, data integrity, access and enforcement.

10. The Rights of Users

You may exercise certain rights regarding your Data processed by us. In particular, users based

in the EU may do the following:

 Right of confirmation

You shall have the right granted by the European legislator to obtain from us the confirmation

as to whether or not personal data concerning you are being processed.

 Right of Access

You shall have the right granted by the European legislator to obtain from us free information

about your personal data stored at any time and a copy of this information. Furthermore, the

European directives and regulations grant you access to the following information:

 the purposes of the processing;

 the categories of personal data concerned;

 the recipients or categories of recipients to whom the personal data have been or will

be disclosed, in particular recipients in third countries or international organizations;

 where possible, the envisaged period for which the personal data will be stored, or, if

not possible, the criteria used to determine that period;

 the existence of the right to request from us rectification or erasure of personal data, or

restriction of processing of personal data concerning the data subject, or to object to

such processing;

 the existence of the right to lodge a complaint with a supervisory authority;

 where the personal data are not collected from you, any available information as to its

source;

 the existence of automated decision-making, including profiling, referred to in Article

22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the

logic involved, as well as the significance and envisaged consequences of such

processing for you.

Furthermore, you shall have a right to obtain information as to whether personal data are

transferred to a third country or to an international organization. Where this is the case, you

shall have the right to be informed of the appropriate safeguards relating to the transfer.

 Right to rectification

You shall have the right granted by the European legislator to obtain from us without undue

delay the rectification of inaccurate personal data concerning you. Taking into account the

purposes of the processing, you shall have the right to have incomplete personal data

completed, including by means of providing a supplementary statement.

 Right to erasure (Right to be forgotten)

You shall have the right granted by the European legislator to obtain from us the erasure of

personal data concerning you without undue delay, and we shall have the obligation to erase

personal data without undue delay where one of the following grounds applies, as long as the

processing is not necessary:

 The personal data are no longer necessary in relation to the purposes for which they

were collected or otherwise processed.

 You withdraw consent to which the processing is based according to point (a) of Article

6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other

legal ground for the processing.

 You object to the processing pursuant to Article 21(1) of the GDPR and there are no

overriding legitimate grounds for the processing, or you object to the processing

pursuant to Article 21(2) of the GDPR.

 The personal data have been unlawfully processed.

 The personal data must be erased for compliance with a legal obligation in Union or

Member State law to which we are subject.

 The personal data have been collected in relation to the offer of information society

services referred to in Article 8(1) of the GDPR.

Where we have made personal data public and are obliged pursuant to Article 17(1) to erase

the personal data, we, while taking account of available technology and the cost of

implementation, shall take reasonable steps, including technical measures, to inform other

controllers processing the personal data that you have requested erasure by such controllers of

any links to, or copy or replication of, those personal data, as far as processing is not required.

We will arrange the necessary measures in individual cases.

 Right of restriction of processing

You shall have the right granted by the European legislator to obtain from us restriction of

processing where one of the following applies:

 The accuracy of the personal data is contested by the data subject, for a period enabling

us to verify the accuracy of the personal data.

 The processing is unlawful and the data subject opposes the erasure of the personal

data and requests instead the restriction of their use instead.

 We no longer need the personal data for the purposes of the processing, but we are

required by the data subject for the establishment, exercise or defence of legal claims.

 You have objected to processing pursuant to Article 21(1) of the GDPR pending the

verification whether our legitimate grounds override those of yours.

If one of the aforementioned conditions is met, and you wish to request the restriction of the

processing of personal data stored by us, you may at any time contact us.

 Right to data portability

You shall have the right granted by the European legislator, to receive the personal data

concerning you, which was provided to us, in a structured, commonly used and machine-

readable format. You shall have the right to transmit those data to another data controller

without hindrance from us to which the personal data have been provided, as long as the

processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of

Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and

the processing is carried out by automated means, as long as the processing is not necessary for

the performance of a task carried out in the public interest or in the exercise of official

authority vested in us.

 Right to object

You shall have the right granted by the European legislator to object, on grounds relating to

your particular situation, at any time, to processing of personal data concerning you, which is

based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these

provisions.

We shall no longer process the personal data in the event of the objection, unless we can

demonstrate compelling legitimate grounds for the processing which override the interests,

rights and freedoms of the data subject, or for the establishment, exercise or defense of legal

claims.

If we processes personal data for direct marketing purposes, you shall have the right to object

at any time to processing of personal data concerning you for such marketing. This applies to

profiling to the extent that it is related to such direct marketing. If you object to us to the

processing for direct marketing purposes, we will no longer process the personal data for these

purposes.

In addition, you have the right, on grounds relating to your particular situation, to object to

processing of personal data concerning you by us for scientific or historical research purposes,

or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is

necessary for the performance of a task carried out for reasons of public interest.

 Automated individual decision-making, including profiling

You shall have the right granted by the European legislator not to be subject to a decision based

solely on automated processing, including profiling, which produces legal effects concerning

you, or similarly significantly affects you, as long as the decision (1) is not necessary for entering

into, or the performance of, a contract between you and us, or (2) is not authorized by Union or

Member State law to which we are subject and which also lays down suitable measures to

safeguard your rights and freedoms and legitimate interests, or (3) is not based on your explicit

consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between you

and us, or (2) it is based on your explicit consent, we shall implement suitable measures to

safeguard your rights and freedoms and legitimate interests, at least the right to obtain human

intervention on our part, to express your point of view and contest the decision.

 Right to withdraw data protection consent

You shall have the right granted by the European legislator to withdraw your consent to

processing of your personal data at any time. You may initiate request with us

at help@iheartstudy.com to exercise any of the above-mentioned rights. We shall review your

request and, in our own discretion, honor your request, if deemed necessary by us, within

reasonable time.

11. Use by Children and COPPA Compliance

o Our App strives to comply with COPPA regulations. COPPA stands for the

“Children’s Online Privacy Protection Act”. It is a U.S. federal law enforced by the

Federal Trade Commission. Its purpose is to give parents control over their

children’s privacy online. COPPA imposes special legal obligations on websites,

mobile apps, tablets, and other similar technologies designed for children under

the age of 13.

o With some exceptions, COPPA requires companies to get a parent’s verified

permission (such as through a credit card transaction, customer support phone

call, or other legal method) before collecting or using a child’s personal

information online “Personal information” includes a child’s name, home

address, email address, phone number, picture, voice recording, physical

location, and certain unique identifiers (like device ID). Without a parent’s prior

permission, COPPA prohibits certain types of online advertising, community

forums, and social networking features. COPPA also requires companies to post

a privacy policy and to keep children’s data secure.

o Under the COPPA law, you can ask a company to delete or stop using your child’s

personal information at any time Carefully review each company’s privacy policy

before allowing your child to share any personal information with that company.

o We strive to educate parents and kids about how to appropriately safeguard

their privacy when using our App. We are committed to complying with the

Children’s Online Privacy Protection Act of 1998 (“COPPA”) which requires us to

inform parents and legal guardians about our information collection and use

practices. COPPA also requires that we obtain parental consent before we allow

children under the age of 13 to access and/or use our App. We recommend that

parents discuss with their kids restrictions regarding the online release of

Personal Data to anyone they do not know. We strive to help parents ensure

that their kids have a safe experience using our App and other services. Parents

or legal guardians can review any Personal Data collected about their child under

13 years of age, have this information deleted, request that there be no further

collection or use of their child’s Personal Data (name and age), and/or allow for

our collection and use of their child’s Personal Data while withholding consent

for us to disclose it to third parties. We may take steps to verify the identity of

anyone requesting information about a child and to ensure that the person is in

fact the child’s parent or legal guardian.

12. Compliance with CalOPPA

o We are also committed to complying with the California Online Privacy

Protection Act (“CalOPPA”) which requires commercial websites and online

services to post a privacy policy. The law requires any person or company in the

United States (and conceivably the world) that operates websites/Apps

collecting ‘personally identifiable information’ from California consumers to post

a conspicuous privacy policy stating exactly the information being collected and

those individuals or companies with whom it is being shared. As required under

CalOPPA, we agree to the following:

 Users can access our App anonymously.

 Our Privacy Policy link includes the word ‘Privacy’ and can easily be found in our App.

o We endeavour to fulfil requirements of the CalOPPA under this Privacy Policy in

line with our policy for user data collection, storage, and disclosure as outlined

for GDPR compliance.

13. Compliance of California Privacy Act 2018

o This Privacy Policy is also applicable on California residents and explains how we

collect, use, and share your Personal Information and how you may exercise your

rights under the California Consumer Privacy Act of 2018 (“CCPA”).

14. Your rights under the CCPA:

o Under the CCPA, you have the right to access the Personal Information we’ve

collected about you during the past 12 months and information about our data

practices. You also have the right to request that we delete the Personal

Information that we have collected from you.

o To request manual access or deletion of your Personal Information, please

o Please note, for all manual requests, you will need to verify your identity by

providing us with the all the information as we may require from you for this

purpose.

o You have the right to be free from any discrimination for exercising your rights to

access or delete your Personal Information. We will not discriminate against you

for exercising any of these rights.

o If you have additional questions about this or how to exercise your rights under

the CCPA, please contact us at help@iheartstudy.com.

15. Changes to this Privacy Statement

o We may modify these this Privacy Policy from time to time, and any such change

shall be reflected on the App with the updated version of the Privacy Policy and

you agree to be bound to any changes to the updated version of Privacy Policy

when you use the App or its services.

o You acknowledge and agree that it is your responsibility to review this App and

this Policy periodically and to be aware of any modifications. Updates to this

Policy will be posted on this page.

o Also, occasionally there may be information on the App that contains

typographical errors, inaccuracies or omissions that may relate to service

descriptions, pricing, availability, and various other information, and the App

reserves the right to correct any errors, inaccuracies or omissions and to change

or update the information at any time, without prior notice.

16. Contact US

o If you have questions about our Privacy Policy, please contact us via

email: help@iheartstudy.com.